Aug 27 00:53:05 prd-ubuntu1804-docker-8c-8g-41349 passwd[1011]: password for 'ubuntu' changed by 'root' Aug 27 00:53:05 prd-ubuntu1804-docker-8c-8g-41349 systemd-logind[1134]: Watching system buttons on /dev/input/event0 (Power Button) Aug 27 00:53:05 prd-ubuntu1804-docker-8c-8g-41349 systemd-logind[1134]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 27 00:53:05 prd-ubuntu1804-docker-8c-8g-41349 systemd-logind[1134]: New seat seat0. Aug 27 00:53:05 prd-ubuntu1804-docker-8c-8g-41349 sshd[1177]: Server listening on 0.0.0.0 port 22. Aug 27 00:53:05 prd-ubuntu1804-docker-8c-8g-41349 sshd[1177]: Server listening on :: port 22. Aug 27 00:53:07 prd-ubuntu1804-docker-8c-8g-41349 sshd[1449]: Did not receive identification string from 10.30.104.4 port 56748 Aug 27 00:53:11 prd-ubuntu1804-docker-8c-8g-41349 sshd[1484]: Invalid user jenkins from 10.30.104.4 port 56792 Aug 27 00:53:11 prd-ubuntu1804-docker-8c-8g-41349 sshd[1484]: Received disconnect from 10.30.104.4 port 56792:11: Closed due to user request. [preauth] Aug 27 00:53:11 prd-ubuntu1804-docker-8c-8g-41349 sshd[1484]: Disconnected from invalid user jenkins 10.30.104.4 port 56792 [preauth] Aug 27 00:53:13 prd-ubuntu1804-docker-8c-8g-41349 sshd[1488]: Invalid user jenkins from 10.30.104.4 port 56866 Aug 27 00:53:13 prd-ubuntu1804-docker-8c-8g-41349 sshd[1488]: Received disconnect from 10.30.104.4 port 56866:11: Closed due to user request. [preauth] Aug 27 00:53:13 prd-ubuntu1804-docker-8c-8g-41349 sshd[1488]: Disconnected from invalid user jenkins 10.30.104.4 port 56866 [preauth] Aug 27 00:53:15 prd-ubuntu1804-docker-8c-8g-41349 sshd[1490]: Invalid user jenkins from 10.30.104.4 port 56954 Aug 27 00:53:15 prd-ubuntu1804-docker-8c-8g-41349 sshd[1490]: Received disconnect from 10.30.104.4 port 56954:11: Closed due to user request. [preauth] Aug 27 00:53:15 prd-ubuntu1804-docker-8c-8g-41349 sshd[1490]: Disconnected from invalid user jenkins 10.30.104.4 port 56954 [preauth] Aug 27 00:53:17 prd-ubuntu1804-docker-8c-8g-41349 sshd[1492]: Invalid user jenkins from 10.30.104.4 port 56980 Aug 27 00:53:18 prd-ubuntu1804-docker-8c-8g-41349 sshd[1492]: Received disconnect from 10.30.104.4 port 56980:11: Closed due to user request. [preauth] Aug 27 00:53:18 prd-ubuntu1804-docker-8c-8g-41349 sshd[1492]: Disconnected from invalid user jenkins 10.30.104.4 port 56980 [preauth] Aug 27 00:53:20 prd-ubuntu1804-docker-8c-8g-41349 sshd[1494]: Invalid user jenkins from 10.30.104.4 port 56994 Aug 27 00:53:20 prd-ubuntu1804-docker-8c-8g-41349 sshd[1494]: Received disconnect from 10.30.104.4 port 56994:11: Closed due to user request. [preauth] Aug 27 00:53:20 prd-ubuntu1804-docker-8c-8g-41349 sshd[1494]: Disconnected from invalid user jenkins 10.30.104.4 port 56994 [preauth] Aug 27 00:53:22 prd-ubuntu1804-docker-8c-8g-41349 sshd[1496]: Invalid user jenkins from 10.30.104.4 port 57060 Aug 27 00:53:22 prd-ubuntu1804-docker-8c-8g-41349 sshd[1496]: Received disconnect from 10.30.104.4 port 57060:11: Closed due to user request. [preauth] Aug 27 00:53:22 prd-ubuntu1804-docker-8c-8g-41349 sshd[1496]: Disconnected from invalid user jenkins 10.30.104.4 port 57060 [preauth] Aug 27 00:53:25 prd-ubuntu1804-docker-8c-8g-41349 sshd[1692]: Invalid user jenkins from 10.30.104.4 port 57092 Aug 27 00:53:25 prd-ubuntu1804-docker-8c-8g-41349 sshd[1692]: Received disconnect from 10.30.104.4 port 57092:11: Closed due to user request. [preauth] Aug 27 00:53:25 prd-ubuntu1804-docker-8c-8g-41349 sshd[1692]: Disconnected from invalid user jenkins 10.30.104.4 port 57092 [preauth] Aug 27 00:53:27 prd-ubuntu1804-docker-8c-8g-41349 sshd[1740]: Invalid user jenkins from 10.30.104.4 port 57112 Aug 27 00:53:27 prd-ubuntu1804-docker-8c-8g-41349 sshd[1740]: Received disconnect from 10.30.104.4 port 57112:11: Closed due to user request. [preauth] Aug 27 00:53:27 prd-ubuntu1804-docker-8c-8g-41349 sshd[1740]: Disconnected from invalid user jenkins 10.30.104.4 port 57112 [preauth] Aug 27 00:53:29 prd-ubuntu1804-docker-8c-8g-41349 sshd[1761]: Invalid user jenkins from 10.30.104.4 port 57136 Aug 27 00:53:29 prd-ubuntu1804-docker-8c-8g-41349 sshd[1761]: Received disconnect from 10.30.104.4 port 57136:11: Closed due to user request. [preauth] Aug 27 00:53:29 prd-ubuntu1804-docker-8c-8g-41349 sshd[1761]: Disconnected from invalid user jenkins 10.30.104.4 port 57136 [preauth] Aug 27 00:53:31 prd-ubuntu1804-docker-8c-8g-41349 sshd[1770]: Invalid user jenkins from 10.30.104.4 port 57160 Aug 27 00:53:31 prd-ubuntu1804-docker-8c-8g-41349 sshd[1770]: Received disconnect from 10.30.104.4 port 57160:11: Closed due to user request. [preauth] Aug 27 00:53:31 prd-ubuntu1804-docker-8c-8g-41349 sshd[1770]: Disconnected from invalid user jenkins 10.30.104.4 port 57160 [preauth] Aug 27 00:53:33 prd-ubuntu1804-docker-8c-8g-41349 sshd[1772]: Invalid user jenkins from 10.30.104.4 port 57216 Aug 27 00:53:33 prd-ubuntu1804-docker-8c-8g-41349 sshd[1772]: Received disconnect from 10.30.104.4 port 57216:11: Closed due to user request. [preauth] Aug 27 00:53:33 prd-ubuntu1804-docker-8c-8g-41349 sshd[1772]: Disconnected from invalid user jenkins 10.30.104.4 port 57216 [preauth] Aug 27 00:53:35 prd-ubuntu1804-docker-8c-8g-41349 sshd[1774]: Invalid user jenkins from 10.30.104.4 port 57242 Aug 27 00:53:35 prd-ubuntu1804-docker-8c-8g-41349 sshd[1774]: Received disconnect from 10.30.104.4 port 57242:11: Closed due to user request. [preauth] Aug 27 00:53:35 prd-ubuntu1804-docker-8c-8g-41349 sshd[1774]: Disconnected from invalid user jenkins 10.30.104.4 port 57242 [preauth] Aug 27 00:53:38 prd-ubuntu1804-docker-8c-8g-41349 sshd[1799]: Invalid user jenkins from 10.30.104.4 port 57262 Aug 27 00:53:38 prd-ubuntu1804-docker-8c-8g-41349 sshd[1799]: Received disconnect from 10.30.104.4 port 57262:11: Closed due to user request. [preauth] Aug 27 00:53:38 prd-ubuntu1804-docker-8c-8g-41349 sshd[1799]: Disconnected from invalid user jenkins 10.30.104.4 port 57262 [preauth] Aug 27 00:53:40 prd-ubuntu1804-docker-8c-8g-41349 sshd[1801]: Invalid user jenkins from 10.30.104.4 port 57280 Aug 27 00:53:40 prd-ubuntu1804-docker-8c-8g-41349 sshd[1801]: Received disconnect from 10.30.104.4 port 57280:11: Closed due to user request. [preauth] Aug 27 00:53:40 prd-ubuntu1804-docker-8c-8g-41349 sshd[1801]: Disconnected from invalid user jenkins 10.30.104.4 port 57280 [preauth] Aug 27 00:53:41 prd-ubuntu1804-docker-8c-8g-41349 useradd[1821]: new group: name=jenkins, GID=1001 Aug 27 00:53:41 prd-ubuntu1804-docker-8c-8g-41349 useradd[1821]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 27 00:53:41 prd-ubuntu1804-docker-8c-8g-41349 usermod[1828]: add 'jenkins' to group 'docker' Aug 27 00:53:41 prd-ubuntu1804-docker-8c-8g-41349 usermod[1828]: add 'jenkins' to shadow group 'docker' Aug 27 00:53:42 prd-ubuntu1804-docker-8c-8g-41349 sshd[1889]: Accepted publickey for jenkins from 10.30.104.4 port 57302 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Aug 27 00:53:42 prd-ubuntu1804-docker-8c-8g-41349 sshd[1889]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 27 00:53:42 prd-ubuntu1804-docker-8c-8g-41349 systemd-logind[1134]: New session 1 of user jenkins. Aug 27 00:53:42 prd-ubuntu1804-docker-8c-8g-41349 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 27 00:54:02 prd-ubuntu1804-docker-8c-8g-41349 CRON[2441]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 00:54:02 prd-ubuntu1804-docker-8c-8g-41349 CRON[2441]: pam_unix(cron:session): session closed for user root Aug 27 00:55:01 prd-ubuntu1804-docker-8c-8g-41349 CRON[2951]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 00:55:01 prd-ubuntu1804-docker-8c-8g-41349 CRON[2951]: pam_unix(cron:session): session closed for user root Aug 27 00:56:01 prd-ubuntu1804-docker-8c-8g-41349 CRON[4322]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 27 00:56:01 prd-ubuntu1804-docker-8c-8g-41349 CRON[4322]: pam_unix(cron:session): session closed for user root Aug 27 00:56:52 prd-ubuntu1804-docker-8c-8g-41349 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-smoke-usecases-robot-py3-docker-verify-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 27 00:56:52 prd-ubuntu1804-docker-8c-8g-41349 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)